[PATCH 3.14 16/29] netfilter: x_tables: make sure e->next_offset covers remaining blob size

3.14-stable review patch. If anyone has any objections, please let me know. -- From: Florian Westphal commit 6e94e0cfb0887e4013b3b930fa6ab1fe6bb6ba91 upstream. Otherwise this function may read data beyond the ruleset blob. Signed-off-by: Florian Westphal

[PATCH 3.14 16/29] netfilter: x_tables: make sure e->next_offset covers remaining blob size

3.14-stable review patch. If anyone has any objections, please let me know. -- From: Florian Westphal commit 6e94e0cfb0887e4013b3b930fa6ab1fe6bb6ba91 upstream. Otherwise this function may read data beyond the ruleset blob. Signed-off-by: Florian Westphal Signed-off-by: